HP warns cybercriminals push fake agentic AI trading bots to hijack crypto wallet extensions

• HP flagged a rise in crypto wallet theft tied to fake agentic AI trading tools that push malware disguised as legitimate software.
• Malware swaps trusted wallet browser extensions for lookalikes, capturing credentials to enable direct theft of crypto holdings.
• QR-code phishing persisted, shifting victims from PCs to less-protected mobile devices via PDFs that prompt scans to reach credential-harvesting sites.
• Phantom Gate emerged as a new loader linked to Phantom Stealer, lowering barriers to assemble scalable infection chains.
• April–June 2026 data showed 10% of email threats bypassed at least one gateway scanner; executables led delivery at 40%.

Disclaimer: This news brief was created by Public Technologies (PUBT) using generative artificial intelligence. While PUBT strives to provide accurate and timely information, this AI-generated content is for informational purposes only and should not be interpreted as financial, investment, or legal advice. HP Inc. published the original content used to generate this news brief on September 17, 2026, and is solely responsible for the information contained therein.